26e5794478d242b74b50a7905abc3b9a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26e5794478d242b74b50a7905abc3b9a_JaffaCakes118
Size

314KB
MD5

26e5794478d242b74b50a7905abc3b9a
SHA1

35f4ee8d6d10828403423aa2af03bd1c56b23900
SHA256

48978c224219f3d8e5f42ad58e28f02aac1622b6c9f2840f3c1acb22e97a6350
SHA512

93cfe92d10abc1686d48a1107b720d6c3e0cd3c55cbb74f61486f880d88dc14c120a5042384d8c3f6e2cdd167293ef323db0a4bc52632b03e0ac0f4b9ce01479
SSDEEP

6144:3y8Yqs412uHzjGwk+Ly5v6wUdwlWdbubrRZK:3nPs412GlkY3ClWd4K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26e5794478d242b74b50a7905abc3b9a_JaffaCakes118

Files

26e5794478d242b74b50a7905abc3b9a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\atrpmt\eesmxzdj\eehtt.pdb

Sections

.text
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE